Question 1

A customer has multiple violations in the environment including:User namespace is enabledAn LDAP server is enabledSSH root is enabledWhich section of Console should the administrator use to review these findings?

Options :

A : Manage

B : Vulnerabilities

C : Radar

D : Compliance

Answer: D

Question 2

An administrator wants to install the Defenders to a Kubernetes cluster. This cluster is running the console onthe default service endpoint and will be exporting to YAML.Console Address: $CONSOLE_ADDRESS Websocket Address: $WEBSOCKET_ADDRESS User:$ADMIN_USERWhich command generates the YAML file for Defender install?

Options :

A :

B :

C :

D :

Answer: D

Question 3

Which RQL query will help create a custom identity and access management (1AM) policy to alert onLambda functions that have permission to terminate EC2 instances?

Options :

A : iam from cloud.resource where dest.cloud.type = ’AWS’ AND source.cloud.service.name = ’lambda’AND source.cloud.resource.type = ’function’ AND dest.cloud.service.name = ’ec2’ AND action.name= ’ec2:TerminateInstances’

B : config from iam where dest.cloud.type = ’AWS’ AND source.cloud.service.name = ’ec2’ AND source.cloud.resource.type = ’instance’ AND dest.cloud.service.name = ’lambda’ AND action.name = ’ec2:TerminateInstances'

C : iam from cloud.resource where cloud.type equals ’AWS’ AND cloud.resource.type equals ’lambdafunction’ AND cloud.service.name = ’ec2’ AND action.name equals ’ec2:TerminateInstances’

D : config from iam where dest.cloud.type = ’AWS’ AND source.cloud.service.name = ’lambda’ ANDsource.cloud.resource.type = ’function’ AND dest.cloud.service.name = ’ec2’ AND action.name = ’ec2:TerminateInstances’

Answer: D

Question 4

A Prisma Cloud administrator is onboarding a single GCP project to Prisma Cloud. Which two steps can beperformed by the Terraform script? (Choose two.)

Options :

A : enable flow logs for Prisma Cloud.

B : create the Prisma Cloud role.

C : enable the required APIs for Prisma Cloud.

D : publish the flow log to a storage bucket.

Answer: B,C

Question 5

The security team wants to target a CNAF policy for specific running Containers. How should theadministrator scope the policy to target the Containers?

Options :

A : scope the policy to Image names.

B : scope the policy to namespaces.

C : scope the policy to Defender names.

D : scope the policy to Host names.

Answer: A